> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Google Workspace Apps Script projects create hidden GCP projects (sys-<...>) that can be impersonated by attackers. This technique enables stealthy persistence (service accounts, hidden compute, cryptomining) and can bypass common console inspections.
October 8, 2025: This blog post has been updated to include the Amazon Cognito managed login experience. The managed login experience has an updated look, additional features, and enhanced customization options. September 8, 2023: It’s important to know that if you activate user sign-up in your user...
292 IT and cybersecurity leaders reveal the ransomware realities for healthcare establishments today.
CRM giant 'will not engage, negotiate with, or pay' the scumbags Salesforce won't pay a ransom demand to criminals who claim to have stolen nearly 1 billion customer records and are threatening to leak the data if the CRM giant doesn't pony up some cash.…
From phone spyware and facial recognition to phone unlocking technology and databases and more, this tech powers Trump's deportation machine.
The Scattered LAPSUS$ Hunters hacking group claims to have accessed data from around 40 customers of Salesforce, the cloud-based customer relationship management service, stealing almost one billion records.
Read more in my article on the Fortra blog.
Modeling scammers are reinventing old tricks for the social media age—targeting not just the young, but older adults too.
84 million requests a second means even rare bugs appear often. We'll reveal how we discovered a race condition in the Go arm64 compiler and got it fixed.
Foreign threat actors adopting ChatGPT to bolster “old playbook” of attacks, OpenAI finds But, in what may be considered good news for security teams, the AI start-up also says most threat actors appear to be playing it safe and sticking with “tried and true” methods previously used to carry out th...
Why you should act now to ensure you meet the new hardware standards, and prioritise security.
A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT
Berlin's opposition likely kills off Brussels' bid to scan everyone's messages Germany has committed to oppose the EU's controversial "Chat Control" regulations following huge pressure from multiple activists and major organizations.…
Cryptographie post-quantique, les travaux de l’ANSSI
anssiadm
mer 08/10/2025 - 12:34
Accompagner la transition vers la cryptographie post-quantique : l’ANSSI présente ses travaux et sa Fà Q dédiée, en faveur d’une mobilisation collective pour répondre à un enjeu majeu...
According to TransUnion, digital fraud has cost companies $534bn in losses globally with US business hit hardest
Scammers are sending emails purporting to be from major airlines/airports trying to swindle money by demanding refundable deposits.
Jaguar Land Rover has reported a 25% drop in volume sales in the three months up to September 30, largely due to the impact of the ongoing cyber incident
Never rely on just a password, however strong it may be. Multi-factor authentication is essential for anyone who wants to protect their online accounts from intruders.
As the go-to cybersecurity expert for your friends and family, you’ll want to be ready for those “I clicked a suspicious link — now what?” messages. Share this quick guide to help them know exactly what to do next.
Unit 42 discovers ClickFix phishing kits, commoditizing social engineering. This kit presents a lowered barrier for inexperienced cybercriminals.
The post The ClickFix Factory: First Exposure of IUAM ClickFix Generator appeared first on Unit 42.
North Korean hackers have stolen over $2bn in cryptocurrency already this year, says Elliptic